SQL and HTML friendly form parsing

Anon

Spent the best part of the morning trying to figure out how to make my insert form more HTML and SQL 7 friendly.

I've tried several of the parse functions and surfed around for help but I'm still pulling my hair out.

For example, I still can't seem to get the database to accept strings with single quotes in them. I've tried '' I've tried addslashes, etc.

Also, I'm still trying to figure out how to make a string accept html coding like <b>this and that</b> or the Academy®.

When I fetch the database fields they still print out as the exact text and not the styling or entities. I've tried using htmlentities and htmlspecialchars but it doesn't seem to work.

A bit of a learning curve right now and I appear to have my pants caught in the chain. :-)

Anon

Hey man - there is a function within php called ereg_replace()
it goes like this:
string ereg_replace(string pattern, string replacement, string string);
example:
$poop = ereg_replace(', \', $poop)
Within the variable $poop, this will replace any single quote with this: \'

This should fix yer prob

-Lazz-

Anon

It turns out that the ODBC/SQL database doesn't like the magic-quotes function. So, I've been stripping the resulting \' and replacing them with 2 single quotes and all is well.

Anon

HA!!!

YEEEEEEHHAAAAAWWWWW

I have been LOkInG EVERYWHERE FOR THIS!!!! OH GOD THIS WAS RRIDCULLLOUS!..

Im studdering, but really though he gave you the wrong sytax for the ereg_replace.

$poop = ereg_replace("'", "\'", $poop)

That will work better I think. I could not get it to work any other way, You can also do this in SQL with the replace command there.

-kid-